All integrations

Cloudflare

DEVELOPER · DEVELOPER

Zones, DNS records, TLS material, and every zone setting on that account.

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

cloudflare_delete_accounts_by_account_id_rulesets_by_ruleset_idWRITE

Delete an account ruleset via DELETE /accounts/{account_id}/rulesets/{ruleset_id}

account_rulesets:write
cloudflare_delete_accounts_by_account_id_rulesets_by_ruleset_id_rules_by_rule_idWRITE

Delete an account ruleset rule via DELETE /accounts/{account_id}/rulesets/{ruleset_id}/rules/{rule_id}

account_rulesets:write
cloudflare_delete_accounts_by_account_id_rulesets_by_ruleset_id_versions_by_ruleset_versionWRITE

Delete an account ruleset version via DELETE /accounts/{account_id}/rulesets/{ruleset_id}/versions/{ruleset_version}

account_rulesets:write
cloudflare_delete_zones_by_zone_idWRITE

Delete Zone via DELETE /zones/{zone_id}

zone:write
cloudflare_delete_zones_by_zone_id_acm_custom_trust_store_by_custom_origin_trust_store_idWRITE

Delete Custom Origin Trust Store via DELETE /zones/{zone_id}/acm/custom_trust_store/{custom_origin_trust_store_id}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_addressing_regional_hostnames_by_hostnameWRITE

Delete Regional Hostname via DELETE /zones/{zone_id}/addressing/regional_hostnames/{hostname}

dns:write
cloudflare_delete_zones_by_zone_id_cache_tiered_cache_smart_topology_enableWRITE

Delete Smart Tiered Cache setting via DELETE /zones/{zone_id}/cache/tiered_cache_smart_topology_enable

zone_settings:write
cloudflare_delete_zones_by_zone_id_cache_variantsWRITE

Delete variants setting via DELETE /zones/{zone_id}/cache/variants

zone_settings:write
cloudflare_delete_zones_by_zone_id_client_certificates_by_client_certificate_idWRITE

Revoke Client Certificate via DELETE /zones/{zone_id}/client_certificates/{client_certificate_id}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_custom_csrs_by_custom_csr_idWRITE

Delete Custom CSR via DELETE /zones/{zone_id}/custom_csrs/{custom_csr_id}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_custom_hostnames_by_custom_hostname_idWRITE

Delete Custom Hostname (and any issued SSL certificates) via DELETE /zones/{zone_id}/custom_hostnames/{custom_hostname_id}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_custom_hostnames_by_custom_hostname_id_certificate_pack_by_certificate_pack_id_certificates_by_certificate_idWRITE

Delete Single Certificate And Key For Custom Hostname via DELETE /zones/{zone_id}/custom_hostnames/{custom_hostname_id}/certificate_pack/{certificate_pack_id}/certificates/{certificate_id}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_custom_hostnames_fallback_originWRITE

Delete Fallback Origin for Custom Hostnames via DELETE /zones/{zone_id}/custom_hostnames/fallback_origin

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_dns_records_by_dns_record_idWRITE

Delete DNS Record via DELETE /zones/{zone_id}/dns_records/{dns_record_id}

dns:write
cloudflare_delete_zones_by_zone_id_dnssecWRITE

Delete DNSSEC records via DELETE /zones/{zone_id}/dnssec

dns:write
cloudflare_delete_zones_by_zone_id_email_routing_dnsWRITE

Disable Email Routing (zone / email / routing / dns) via DELETE /zones/{zone_id}/email/routing/dns

zone_settings:write
cloudflare_delete_zones_by_zone_id_filtersWRITE

Delete filters (deprecated) via DELETE /zones/{zone_id}/filters

firewall_services:write
cloudflare_delete_zones_by_zone_id_filters_by_filter_idWRITE

Delete a filter (deprecated) via DELETE /zones/{zone_id}/filters/{filter_id}

firewall_services:write
cloudflare_delete_zones_by_zone_id_firewall_access_rules_rules_by_rule_idWRITE

Delete an IP Access rule via DELETE /zones/{zone_id}/firewall/access_rules/rules/{rule_id}

firewall_services:write
cloudflare_delete_zones_by_zone_id_firewall_lockdowns_by_lock_downs_idWRITE

Delete a Zone Lockdown rule via DELETE /zones/{zone_id}/firewall/lockdowns/{lock_downs_id}

firewall_services:write
cloudflare_delete_zones_by_zone_id_firewall_rulesWRITE

Delete firewall rules (deprecated) via DELETE /zones/{zone_id}/firewall/rules

firewall_services:write
cloudflare_delete_zones_by_zone_id_firewall_rules_by_rule_idWRITE

Delete a firewall rule (deprecated) via DELETE /zones/{zone_id}/firewall/rules/{rule_id}

firewall_services:write
cloudflare_delete_zones_by_zone_id_firewall_ua_rules_by_ua_rule_idWRITE

Delete a User Agent Blocking rule via DELETE /zones/{zone_id}/firewall/ua_rules/{ua_rule_id}

firewall_services:write
cloudflare_delete_zones_by_zone_id_firewall_waf_overrides_by_overrides_idWRITE

Delete a WAF override (deprecated) via DELETE /zones/{zone_id}/firewall/waf/overrides/{overrides_id}

zone_settings:write
cloudflare_delete_zones_by_zone_id_holdWRITE

Remove Zone Hold via DELETE /zones/{zone_id}/hold

zone:write
cloudflare_delete_zones_by_zone_id_hostnames_settings_by_setting_id_by_hostnameWRITE

Delete TLS setting for hostname via DELETE /zones/{zone_id}/hostnames/settings/{setting_id}/{hostname}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_keyless_certificates_by_keyless_certificate_idWRITE

Delete Keyless SSL Configuration via DELETE /zones/{zone_id}/keyless_certificates/{keyless_certificate_id}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_managed_headersWRITE

Delete Managed Transforms via DELETE /zones/{zone_id}/managed_headers

account_rulesets:write
cloudflare_delete_zones_by_zone_id_origin_tls_client_auth_by_certificate_idWRITE

Delete Certificate via DELETE /zones/{zone_id}/origin_tls_client_auth/{certificate_id}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_origin_tls_client_auth_hostnames_certificates_by_certificate_idWRITE

Delete Hostname Client Certificate via DELETE /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates/{certificate_id}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_pagerules_by_pagerule_idWRITE

Delete a Page Rule via DELETE /zones/{zone_id}/pagerules/{pagerule_id}

page_rules:write
cloudflare_delete_zones_by_zone_id_rate_limits_by_rate_limit_idWRITE

Delete a rate limit (deprecated) via DELETE /zones/{zone_id}/rate_limits/{rate_limit_id}

firewall_services:write
cloudflare_delete_zones_by_zone_id_rulesets_by_ruleset_idWRITE

Delete a zone ruleset via DELETE /zones/{zone_id}/rulesets/{ruleset_id}

account_rulesets:write
cloudflare_delete_zones_by_zone_id_rulesets_by_ruleset_id_rules_by_rule_idWRITE

Delete a zone ruleset rule via DELETE /zones/{zone_id}/rulesets/{ruleset_id}/rules/{rule_id}

account_rulesets:write
cloudflare_delete_zones_by_zone_id_rulesets_by_ruleset_id_versions_by_ruleset_versionWRITE

Delete a zone ruleset version via DELETE /zones/{zone_id}/rulesets/{ruleset_id}/versions/{ruleset_version}

account_rulesets:write
cloudflare_delete_zones_by_zone_id_secondary_dns_incomingWRITE

Delete Secondary Zone Configuration via DELETE /zones/{zone_id}/secondary_dns/incoming

dns:write
cloudflare_delete_zones_by_zone_id_secondary_dns_outgoingWRITE

Delete Primary Zone Configuration via DELETE /zones/{zone_id}/secondary_dns/outgoing

dns:write
cloudflare_delete_zones_by_zone_id_security_center_securitytxtWRITE

Deletes security.txt via DELETE /zones/{zone_id}/security-center/securitytxt

zone_settings:write
cloudflare_delete_zones_by_zone_id_spectrum_apps_by_app_idWRITE

Delete Spectrum application via DELETE /zones/{zone_id}/spectrum/apps/{app_id}

zone_settings:write
cloudflare_delete_zones_by_zone_id_speed_api_pages_by_url_testsWRITE

Delete all page tests via DELETE /zones/{zone_id}/speed_api/pages/{url}/tests

zone_settings:write
cloudflare_delete_zones_by_zone_id_speed_api_schedule_by_urlWRITE

Delete scheduled page test via DELETE /zones/{zone_id}/speed_api/schedule/{url}

zone_settings:write
cloudflare_delete_zones_by_zone_id_ssl_certificate_packs_by_certificate_pack_idWRITE

Delete Advanced Certificate Manager Certificate Pack via DELETE /zones/{zone_id}/ssl/certificate_packs/{certificate_pack_id}

ssl_certificates:write
cloudflare_delete_zones_by_zone_id_url_normalizationWRITE

Delete URL Normalization settings via DELETE /zones/{zone_id}/url_normalization

account_rulesets:write
cloudflare_get_accounts_by_account_id_addressing_regional_hostnames_regionsREAD

List Regions via GET /accounts/{account_id}/addressing/regional_hostnames/regions

dns:read
cloudflare_get_accounts_by_account_id_rulesetsREAD

List account rulesets via GET /accounts/{account_id}/rulesets

account_rulesets:read
cloudflare_get_accounts_by_account_id_rulesets_by_ruleset_idREAD

Get an account ruleset via GET /accounts/{account_id}/rulesets/{ruleset_id}

account_rulesets:read
cloudflare_get_accounts_by_account_id_rulesets_by_ruleset_id_versionsREAD

List an account ruleset's versions via GET /accounts/{account_id}/rulesets/{ruleset_id}/versions

account_rulesets:read
cloudflare_get_accounts_by_account_id_rulesets_by_ruleset_id_versions_by_ruleset_versionREAD

Get an account ruleset version via GET /accounts/{account_id}/rulesets/{ruleset_id}/versions/{ruleset_version}

account_rulesets:read
cloudflare_get_accounts_by_account_id_rulesets_by_ruleset_id_versions_by_ruleset_version_by_tag_by_rule_tagREAD

List an account ruleset version's rules by tag via GET /accounts/{account_id}/rulesets/{ruleset_id}/versions/{ruleset_version}/by_tag/{rule_tag}

account_rulesets:read
cloudflare_get_accounts_by_account_id_rulesets_phases_by_ruleset_phase_entrypointREAD

Get an account entry point ruleset via GET /accounts/{account_id}/rulesets/phases/{ruleset_phase}/entrypoint

account_rulesets:read
cloudflare_get_accounts_by_account_id_rulesets_phases_by_ruleset_phase_entrypoint_versionsREAD

List an account entry point ruleset's versions via GET /accounts/{account_id}/rulesets/phases/{ruleset_phase}/entrypoint/versions

account_rulesets:read
cloudflare_get_accounts_by_account_id_rulesets_phases_by_ruleset_phase_entrypoint_versions_by_ruleset_versionREAD

Get an account entry point ruleset version via GET /accounts/{account_id}/rulesets/phases/{ruleset_phase}/entrypoint/versions/{ruleset_version}

account_rulesets:read
cloudflare_get_accounts_by_account_id_settings_transformationsREAD

List Image Resizing configurations for account via GET /accounts/{account_id}/settings/transformations

zone_settings:read
cloudflare_get_accounts_by_account_id_settings_ut_billingREAD

Get Unique Transformations billing setting via GET /accounts/{account_id}/settings/ut-billing

zone_settings:read
cloudflare_get_zones_by_zone_id_acm_custom_trust_storeREAD

List Custom Origin Trust Store Details via GET /zones/{zone_id}/acm/custom_trust_store

ssl_certificates:read
cloudflare_get_zones_by_zone_id_acm_custom_trust_store_by_custom_origin_trust_store_idREAD

Custom Origin Trust Store Details via GET /zones/{zone_id}/acm/custom_trust_store/{custom_origin_trust_store_id}

ssl_certificates:read
cloudflare_get_zones_by_zone_id_acm_total_tlsREAD

Total TLS Settings Details via GET /zones/{zone_id}/acm/total_tls

ssl_certificates:read
cloudflare_get_zones_by_zone_id_addressing_regional_hostnamesREAD

List Regional Hostnames via GET /zones/{zone_id}/addressing/regional_hostnames

dns:read
cloudflare_get_zones_by_zone_id_addressing_regional_hostnames_by_hostnameREAD

Fetch Regional Hostname via GET /zones/{zone_id}/addressing/regional_hostnames/{hostname}

dns:read
cloudflare_get_zones_by_zone_id_ai_audit_robotsREAD

Get robots.txt rules via GET /zones/{zone_id}/ai-audit/robots

zone_settings:read
cloudflare_get_zones_by_zone_id_argo_smart_routingREAD

Get Argo Smart Routing setting via GET /zones/{zone_id}/argo/smart_routing

zone_settings:read
cloudflare_get_zones_by_zone_id_cache_cache_reserveREAD

Get Cache Reserve setting via GET /zones/{zone_id}/cache/cache_reserve

zone_settings:read
cloudflare_get_zones_by_zone_id_cache_cache_reserve_clearREAD

Get Cache Reserve Clear (zone / cache / cache reserve clear) via GET /zones/{zone_id}/cache/cache_reserve_clear

zone_settings:read
cloudflare_get_zones_by_zone_id_cache_origin_post_quantum_encryptionREAD

Get Origin Post-Quantum Encryption setting (deprecated) via GET /zones/{zone_id}/cache/origin_post_quantum_encryption

zone_settings:read
cloudflare_get_zones_by_zone_id_cache_regional_tiered_cacheREAD

Get Regional Tiered Cache setting via GET /zones/{zone_id}/cache/regional_tiered_cache

zone_settings:read
cloudflare_get_zones_by_zone_id_cache_tiered_cache_smart_topology_enableREAD

Get Smart Tiered Cache setting via GET /zones/{zone_id}/cache/tiered_cache_smart_topology_enable

zone_settings:read
cloudflare_get_zones_by_zone_id_cache_variantsREAD

Get variants setting via GET /zones/{zone_id}/cache/variants

zone_settings:read
cloudflare_get_zones_by_zone_id_certificate_authorities_hostname_associationsREAD

List Hostname Associations (zone / certificate authorities / hostname associations) via GET /zones/{zone_id}/certificate_authorities/hostname_associations

ssl_certificates:read
cloudflare_get_zones_by_zone_id_client_certificatesREAD

List Client Certificates via GET /zones/{zone_id}/client_certificates

ssl_certificates:read
cloudflare_get_zones_by_zone_id_client_certificates_by_client_certificate_idREAD

Client Certificate Details via GET /zones/{zone_id}/client_certificates/{client_certificate_id}

ssl_certificates:read
cloudflare_get_zones_by_zone_id_ct_alertingREAD

Get CT Alerting Subscription via GET /zones/{zone_id}/ct/alerting

ssl_certificates:read
cloudflare_get_zones_by_zone_id_custom_csrsREAD

List Custom CSRs via GET /zones/{zone_id}/custom_csrs

ssl_certificates:read
cloudflare_get_zones_by_zone_id_custom_csrs_by_custom_csr_idREAD

Custom CSR Details via GET /zones/{zone_id}/custom_csrs/{custom_csr_id}

ssl_certificates:read
cloudflare_get_zones_by_zone_id_custom_hostnamesREAD

List Custom Hostnames via GET /zones/{zone_id}/custom_hostnames

ssl_certificates:read
cloudflare_get_zones_by_zone_id_custom_hostnames_by_custom_hostname_idREAD

Custom Hostname Details via GET /zones/{zone_id}/custom_hostnames/{custom_hostname_id}

ssl_certificates:read
cloudflare_get_zones_by_zone_id_custom_hostnames_fallback_originREAD

Get Fallback Origin for Custom Hostnames via GET /zones/{zone_id}/custom_hostnames/fallback_origin

ssl_certificates:read
cloudflare_get_zones_by_zone_id_custom_hostnames_quotaREAD

Get Custom Hostname Quota via GET /zones/{zone_id}/custom_hostnames/quota

ssl_certificates:read
cloudflare_get_zones_by_zone_id_dcv_delegation_uuidREAD

Retrieve the DCV Delegation unique identifier. via GET /zones/{zone_id}/dcv_delegation/uuid

ssl_certificates:read
cloudflare_get_zones_by_zone_id_devices_policy_certificatesREAD

Get device certificate provisioning status via GET /zones/{zone_id}/devices/policy/certificates

ssl_certificates:read
cloudflare_get_zones_by_zone_id_dns_recordsREAD

List DNS Records via GET /zones/{zone_id}/dns_records

dns:read
cloudflare_get_zones_by_zone_id_dns_records_by_dns_record_idREAD

DNS Record Details via GET /zones/{zone_id}/dns_records/{dns_record_id}

dns:read
cloudflare_get_zones_by_zone_id_dns_records_exportREAD

Export DNS Records via GET /zones/{zone_id}/dns_records/export

dns:read
cloudflare_get_zones_by_zone_id_dns_records_scan_reviewREAD

List Scanned DNS Records via GET /zones/{zone_id}/dns_records/scan/review

dns:read
cloudflare_get_zones_by_zone_id_dns_records_usageREAD

Get DNS Record Usage via GET /zones/{zone_id}/dns_records/usage

dns:read
cloudflare_get_zones_by_zone_id_dns_settingsREAD

Show DNS Settings via GET /zones/{zone_id}/dns_settings

dns:read
cloudflare_get_zones_by_zone_id_dnssecREAD

DNSSEC Details via GET /zones/{zone_id}/dnssec

dns:read
cloudflare_get_zones_by_zone_id_dnssec_zskREAD

List DNSSEC ZSKs via GET /zones/{zone_id}/dnssec/zsk

dns:read
cloudflare_get_zones_by_zone_id_email_routingREAD

Get Email Routing settings via GET /zones/{zone_id}/email/routing

zone_settings:read
cloudflare_get_zones_by_zone_id_email_routing_dnsREAD

Email Routing - DNS settings via GET /zones/{zone_id}/email/routing/dns

zone_settings:read
cloudflare_get_zones_by_zone_id_email_routing_suppressionREAD

List zone email suppressions (deprecated) via GET /zones/{zone_id}/email/routing/suppression

zone_settings:read
cloudflare_get_zones_by_zone_id_email_routing_suppression_by_suppression_idREAD

Get zone email suppression (deprecated) via GET /zones/{zone_id}/email/routing/suppression/{suppression_id}

zone_settings:read
cloudflare_get_zones_by_zone_id_entitlementsREAD

Get Zone Entitlements via GET /zones/{zone_id}/entitlements

zone:read
cloudflare_get_zones_by_zone_id_filtersREAD

List filters (deprecated) via GET /zones/{zone_id}/filters

firewall_services:read
cloudflare_get_zones_by_zone_id_filters_by_filter_idREAD

Get a filter (deprecated) via GET /zones/{zone_id}/filters/{filter_id}

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_access_rules_rulesREAD

List IP Access rules via GET /zones/{zone_id}/firewall/access_rules/rules

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_lockdownsREAD

List Zone Lockdown rules via GET /zones/{zone_id}/firewall/lockdowns

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_lockdowns_by_lock_downs_idREAD

Get a Zone Lockdown rule via GET /zones/{zone_id}/firewall/lockdowns/{lock_downs_id}

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_rulesREAD

List firewall rules (deprecated) via GET /zones/{zone_id}/firewall/rules

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_rules_by_rule_idREAD

Get a firewall rule (deprecated) via GET /zones/{zone_id}/firewall/rules/{rule_id}

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_ua_rulesREAD

List User Agent Blocking rules via GET /zones/{zone_id}/firewall/ua_rules

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_ua_rules_by_ua_rule_idREAD

Get a User Agent Blocking rule via GET /zones/{zone_id}/firewall/ua_rules/{ua_rule_id}

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_waf_overridesREAD

List WAF overrides (deprecated) via GET /zones/{zone_id}/firewall/waf/overrides

zone_settings:read
cloudflare_get_zones_by_zone_id_firewall_waf_overrides_by_overrides_idREAD

Get a WAF override (deprecated) via GET /zones/{zone_id}/firewall/waf/overrides/{overrides_id}

zone_settings:read
cloudflare_get_zones_by_zone_id_firewall_waf_packagesREAD

List WAF packages (deprecated) via GET /zones/{zone_id}/firewall/waf/packages

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_waf_packages_by_package_idREAD

Get a WAF package (deprecated) via GET /zones/{zone_id}/firewall/waf/packages/{package_id}

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_waf_packages_by_package_id_groupsREAD

List WAF rule groups (deprecated) via GET /zones/{zone_id}/firewall/waf/packages/{package_id}/groups

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_waf_packages_by_package_id_groups_by_group_idREAD

Get a WAF rule group (deprecated) via GET /zones/{zone_id}/firewall/waf/packages/{package_id}/groups/{group_id}

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_waf_packages_by_package_id_rulesREAD

List WAF rules (deprecated) via GET /zones/{zone_id}/firewall/waf/packages/{package_id}/rules

firewall_services:read
cloudflare_get_zones_by_zone_id_firewall_waf_packages_by_package_id_rules_by_rule_idREAD

Get a WAF rule (deprecated) via GET /zones/{zone_id}/firewall/waf/packages/{package_id}/rules/{rule_id}

firewall_services:read
cloudflare_get_zones_by_zone_id_hostnames_settings_by_setting_idREAD

List TLS setting for hostnames via GET /zones/{zone_id}/hostnames/settings/{setting_id}

ssl_certificates:read
cloudflare_get_zones_by_zone_id_keyless_certificatesREAD

List Keyless SSL Configurations via GET /zones/{zone_id}/keyless_certificates

ssl_certificates:read
cloudflare_get_zones_by_zone_id_managed_headersREAD

List Managed Transforms via GET /zones/{zone_id}/managed_headers

account_rulesets:read
cloudflare_get_zones_by_zone_id_origin_tls_client_authREAD

List Certificates (zone / origin tls client auth) via GET /zones/{zone_id}/origin_tls_client_auth

ssl_certificates:read
cloudflare_get_zones_by_zone_id_origin_tls_client_auth_by_certificate_idREAD

Get Certificate Details via GET /zones/{zone_id}/origin_tls_client_auth/{certificate_id}

ssl_certificates:read
cloudflare_get_zones_by_zone_id_origin_tls_client_auth_hostnamesREAD

List Hostname Associations (zone / origin tls client auth / hostnames) via GET /zones/{zone_id}/origin_tls_client_auth/hostnames

ssl_certificates:read
cloudflare_get_zones_by_zone_id_origin_tls_client_auth_hostnames_by_hostnameREAD

Get the Hostname Status for Client Authentication via GET /zones/{zone_id}/origin_tls_client_auth/hostnames/{hostname}

ssl_certificates:read
cloudflare_get_zones_by_zone_id_origin_tls_client_auth_hostnames_certificatesREAD

List Certificates (zone / origin tls client auth / hostnames / certificates) via GET /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates

ssl_certificates:read
cloudflare_get_zones_by_zone_id_origin_tls_client_auth_hostnames_certificates_by_certificate_idREAD

Get the Hostname Client Certificate via GET /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates/{certificate_id}

ssl_certificates:read
cloudflare_get_zones_by_zone_id_origin_tls_client_auth_settingsREAD

Get Enablement Setting for Zone via GET /zones/{zone_id}/origin_tls_client_auth/settings

ssl_certificates:read
cloudflare_get_zones_by_zone_id_pagerulesREAD

List Page Rules via GET /zones/{zone_id}/pagerules

page_rules:read
cloudflare_get_zones_by_zone_id_pagerules_settingsREAD

List available Page Rules settings (deprecated) via GET /zones/{zone_id}/pagerules/settings

page_rules:read
cloudflare_get_zones_by_zone_id_pay_per_crawl_can_be_enabledREAD

Get pay-per-crawl zone eligibility via GET /zones/{zone_id}/pay-per-crawl/can_be_enabled

zone_settings:read
cloudflare_get_zones_by_zone_id_pay_per_crawl_configurationREAD

Get the pay-per-crawl config via GET /zones/{zone_id}/pay-per-crawl/configuration

zone_settings:read
cloudflare_get_zones_by_zone_id_rate_limitsREAD

List rate limits (deprecated) via GET /zones/{zone_id}/rate_limits

firewall_services:read
cloudflare_get_zones_by_zone_id_rate_limits_by_rate_limit_idREAD

Get a rate limit (deprecated) via GET /zones/{zone_id}/rate_limits/{rate_limit_id}

firewall_services:read
cloudflare_get_zones_by_zone_id_rulesetsREAD

List zone rulesets via GET /zones/{zone_id}/rulesets

account_rulesets:read
cloudflare_get_zones_by_zone_id_rulesets_by_ruleset_idREAD

Get a zone ruleset via GET /zones/{zone_id}/rulesets/{ruleset_id}

account_rulesets:read
cloudflare_get_zones_by_zone_id_rulesets_by_ruleset_id_versionsREAD

List a zone ruleset's versions via GET /zones/{zone_id}/rulesets/{ruleset_id}/versions

account_rulesets:read
cloudflare_get_zones_by_zone_id_rulesets_by_ruleset_id_versions_by_ruleset_versionREAD

Get a zone ruleset version via GET /zones/{zone_id}/rulesets/{ruleset_id}/versions/{ruleset_version}

account_rulesets:read
cloudflare_get_zones_by_zone_id_rulesets_by_ruleset_id_versions_by_ruleset_version_by_tag_by_rule_tagREAD

List a zone ruleset version's rules by tag via GET /zones/{zone_id}/rulesets/{ruleset_id}/versions/{ruleset_version}/by_tag/{rule_tag}

account_rulesets:read
cloudflare_get_zones_by_zone_id_rulesets_phases_by_ruleset_phase_entrypointREAD

Get a zone entry point ruleset via GET /zones/{zone_id}/rulesets/phases/{ruleset_phase}/entrypoint

account_rulesets:read
cloudflare_get_zones_by_zone_id_rulesets_phases_by_ruleset_phase_entrypoint_versionsREAD

List a zone entry point ruleset's versions via GET /zones/{zone_id}/rulesets/phases/{ruleset_phase}/entrypoint/versions

account_rulesets:read
cloudflare_get_zones_by_zone_id_rulesets_phases_by_ruleset_phase_entrypoint_versions_by_ruleset_versionREAD

Get a zone entry point ruleset version via GET /zones/{zone_id}/rulesets/phases/{ruleset_phase}/entrypoint/versions/{ruleset_version}

account_rulesets:read
cloudflare_get_zones_by_zone_id_secondary_dns_incomingREAD

Secondary Zone Configuration Details via GET /zones/{zone_id}/secondary_dns/incoming

dns:read
cloudflare_get_zones_by_zone_id_secondary_dns_outgoingREAD

Primary Zone Configuration Details via GET /zones/{zone_id}/secondary_dns/outgoing

dns:read
cloudflare_get_zones_by_zone_id_secondary_dns_outgoing_statusREAD

Get Outgoing Zone Transfer Status via GET /zones/{zone_id}/secondary_dns/outgoing/status

dns:read
cloudflare_get_zones_by_zone_id_security_center_insightsREAD

Retrieves Zone Security Center Insights via GET /zones/{zone_id}/security-center/insights

zone_settings:read
cloudflare_get_zones_by_zone_id_security_center_insights_audit_logREAD

Retrieves Zone Audit Log via GET /zones/{zone_id}/security-center/insights/audit-log

zone_settings:read
cloudflare_get_zones_by_zone_id_security_center_insights_by_issue_id_audit_logREAD

Retrieves Zone Issue Audit Log via GET /zones/{zone_id}/security-center/insights/{issue_id}/audit-log

zone_settings:read
cloudflare_get_zones_by_zone_id_security_center_insights_classREAD

Retrieves Zone Security Center Insight Counts by Class via GET /zones/{zone_id}/security-center/insights/class

zone_settings:read
cloudflare_get_zones_by_zone_id_security_center_insights_scansREAD

Get Recent Zone Scans via GET /zones/{zone_id}/security-center/insights/scans

zone_settings:read
cloudflare_get_zones_by_zone_id_security_center_insights_severityREAD

Retrieves Zone Security Center Insight Counts by Severity via GET /zones/{zone_id}/security-center/insights/severity

zone_settings:read
cloudflare_get_zones_by_zone_id_security_center_insights_typeREAD

Retrieves Zone Security Center Insight Counts by Type via GET /zones/{zone_id}/security-center/insights/type

zone_settings:read
cloudflare_get_zones_by_zone_id_security_center_securitytxtREAD

Retrieves security.txt via GET /zones/{zone_id}/security-center/securitytxt

zone_settings:read
cloudflare_get_zones_by_zone_id_settingsREAD

Get all zone settings (deprecated) via GET /zones/{zone_id}/settings

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_aegisREAD

Get aegis setting via GET /zones/{zone_id}/settings/aegis

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_automatic_platform_optimizationREAD

Get Automatic Platform Optimization setting via GET /zones/{zone_id}/settings/automatic_platform_optimization

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_binary_astREAD

Get Binary AST setting via GET /zones/{zone_id}/settings/binary_ast

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_by_setting_idREAD

Get zone setting via GET /zones/{zone_id}/settings/{setting_id}

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_csam_scanner_third_partyREAD

Get CSAM Scanner setting via GET /zones/{zone_id}/settings/csam_scanner_third_party

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_fontsREAD

Get Cloudflare Fonts setting via GET /zones/{zone_id}/settings/fonts

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_h2_prioritizationREAD

Get HTTP/2 Prioritization setting via GET /zones/{zone_id}/settings/h2_prioritization

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_image_resizingREAD

Get Image Transformations setting via GET /zones/{zone_id}/settings/image_resizing

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_nelREAD

Get NEL setting via GET /zones/{zone_id}/settings/nel

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_origin_h2_max_streamsREAD

Get Origin H2 Max Streams Setting via GET /zones/{zone_id}/settings/origin_h2_max_streams

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_origin_max_http_versionREAD

Get Origin Max HTTP Version Setting via GET /zones/{zone_id}/settings/origin_max_http_version

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_rumREAD

Get RUM status for a zone via GET /zones/{zone_id}/settings/rum

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_speed_brainREAD

Get Cloudflare Speed Brain setting via GET /zones/{zone_id}/settings/speed_brain

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_ssl_automatic_modeREAD

Get Automatic SSL/TLS enrollment status for the given zone via GET /zones/{zone_id}/settings/ssl_automatic_mode

ssl_certificates:read
cloudflare_get_zones_by_zone_id_settings_transformations_allowed_originsREAD

Get Image Transformations Allowed Origins setting via GET /zones/{zone_id}/settings/transformations_allowed_origins

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_transformations_c2paREAD

Get Image Transformations C2PA setting via GET /zones/{zone_id}/settings/transformations_c2pa

zone_settings:read
cloudflare_get_zones_by_zone_id_settings_transformations_configREAD

Get Transformations configuration via GET /zones/{zone_id}/settings/transformations_config

zone_settings:read
cloudflare_get_zones_by_zone_id_smart_shieldREAD

Get Smart Shield Settings via GET /zones/{zone_id}/smart_shield

zone_settings:read
cloudflare_get_zones_by_zone_id_smart_shield_cache_reserve_clearREAD

Get Cache Reserve Clear (zone / smart shield / cache reserve clear) via GET /zones/{zone_id}/smart_shield/cache_reserve_clear

zone_settings:read
cloudflare_get_zones_by_zone_id_spectrum_appsREAD

List Spectrum applications via GET /zones/{zone_id}/spectrum/apps

zone_settings:read
cloudflare_get_zones_by_zone_id_spectrum_apps_by_app_idREAD

Get Spectrum application configuration via GET /zones/{zone_id}/spectrum/apps/{app_id}

zone_settings:read
cloudflare_get_zones_by_zone_id_spectrum_protocolsREAD

List Spectrum application protocols via GET /zones/{zone_id}/spectrum/protocols

zone_settings:read
cloudflare_get_zones_by_zone_id_speed_api_availabilitiesREAD

Get quota and availability via GET /zones/{zone_id}/speed_api/availabilities

zone_settings:read
cloudflare_get_zones_by_zone_id_speed_api_pagesREAD

List tested webpages via GET /zones/{zone_id}/speed_api/pages

zone_settings:read
cloudflare_get_zones_by_zone_id_speed_api_pages_by_url_testsREAD

List page test history via GET /zones/{zone_id}/speed_api/pages/{url}/tests

zone_settings:read
cloudflare_get_zones_by_zone_id_speed_api_pages_by_url_tests_by_test_idREAD

Get a page test result via GET /zones/{zone_id}/speed_api/pages/{url}/tests/{test_id}

zone_settings:read
cloudflare_get_zones_by_zone_id_speed_api_pages_by_url_trendREAD

List core web vital metrics trend via GET /zones/{zone_id}/speed_api/pages/{url}/trend

zone_settings:read
cloudflare_get_zones_by_zone_id_speed_api_schedule_by_urlREAD

Get a page test schedule via GET /zones/{zone_id}/speed_api/schedule/{url}

zone_settings:read
cloudflare_get_zones_by_zone_id_ssl_certificate_packsREAD

List Certificate Packs via GET /zones/{zone_id}/ssl/certificate_packs

ssl_certificates:read
cloudflare_get_zones_by_zone_id_ssl_certificate_packs_by_certificate_pack_idREAD

Get Certificate Pack via GET /zones/{zone_id}/ssl/certificate_packs/{certificate_pack_id}

ssl_certificates:read
cloudflare_get_zones_by_zone_id_ssl_certificate_packs_quotaREAD

Get Certificate Pack Quotas via GET /zones/{zone_id}/ssl/certificate_packs/quota

ssl_certificates:read
cloudflare_get_zones_by_zone_id_ssl_recommendationREAD

SSL/TLS Recommendation (deprecated) via GET /zones/{zone_id}/ssl/recommendation

ssl_certificates:read
cloudflare_get_zones_by_zone_id_ssl_universal_settingsREAD

Universal SSL Settings Details via GET /zones/{zone_id}/ssl/universal/settings

ssl_certificates:read
cloudflare_get_zones_by_zone_id_url_normalizationREAD

Get URL Normalization settings via GET /zones/{zone_id}/url_normalization

account_rulesets:read
cloudflare_patch_accounts_by_account_id_rulesets_by_ruleset_id_rules_by_rule_idWRITE

Update an account ruleset rule via PATCH /accounts/{account_id}/rulesets/{ruleset_id}/rules/{rule_id}

account_rulesets:write
cloudflare_patch_accounts_by_account_id_settings_ut_billingWRITE

Change Unique Transformations billing setting via PATCH /accounts/{account_id}/settings/ut-billing

zone_settings:write
cloudflare_patch_zones_by_zone_idWRITE

Edit Zone via PATCH /zones/{zone_id}

zone:write
cloudflare_patch_zones_by_zone_id_addressing_regional_hostnames_by_hostnameWRITE

Update Regional Hostname via PATCH /zones/{zone_id}/addressing/regional_hostnames/{hostname}

dns:write
cloudflare_patch_zones_by_zone_id_argo_smart_routingWRITE

Patch Argo Smart Routing setting via PATCH /zones/{zone_id}/argo/smart_routing

zone_settings:write
cloudflare_patch_zones_by_zone_id_cache_cache_reserveWRITE

Change Cache Reserve setting via PATCH /zones/{zone_id}/cache/cache_reserve

zone_settings:write
cloudflare_patch_zones_by_zone_id_cache_regional_tiered_cacheWRITE

Change Regional Tiered Cache setting via PATCH /zones/{zone_id}/cache/regional_tiered_cache

zone_settings:write
cloudflare_patch_zones_by_zone_id_cache_tiered_cache_smart_topology_enableWRITE

Patch Smart Tiered Cache setting via PATCH /zones/{zone_id}/cache/tiered_cache_smart_topology_enable

zone_settings:write
cloudflare_patch_zones_by_zone_id_cache_variantsWRITE

Change variants setting via PATCH /zones/{zone_id}/cache/variants

zone_settings:write
cloudflare_patch_zones_by_zone_id_client_certificates_by_client_certificate_idWRITE

Reactivate Client Certificate via PATCH /zones/{zone_id}/client_certificates/{client_certificate_id}

ssl_certificates:write
cloudflare_patch_zones_by_zone_id_ct_alertingWRITE

Update CT Alerting Subscription via PATCH /zones/{zone_id}/ct/alerting

ssl_certificates:write
cloudflare_patch_zones_by_zone_id_custom_hostnames_by_custom_hostname_idWRITE

Edit Custom Hostname via PATCH /zones/{zone_id}/custom_hostnames/{custom_hostname_id}

ssl_certificates:write
cloudflare_patch_zones_by_zone_id_devices_policy_certificatesWRITE

Update device certificate provisioning status via PATCH /zones/{zone_id}/devices/policy/certificates

ssl_certificates:write
cloudflare_patch_zones_by_zone_id_dns_records_by_dns_record_idWRITE

Update DNS Record via PATCH /zones/{zone_id}/dns_records/{dns_record_id}

dns:write
cloudflare_patch_zones_by_zone_id_dns_settingsWRITE

Update DNS Settings via PATCH /zones/{zone_id}/dns_settings

dns:write
cloudflare_patch_zones_by_zone_id_dnssecWRITE

Edit DNSSEC Status via PATCH /zones/{zone_id}/dnssec

dns:write
cloudflare_patch_zones_by_zone_id_email_routingWRITE

Update Email Routing settings (zone / email / routing) [PATCH] via PATCH /zones/{zone_id}/email/routing

zone_settings:write
cloudflare_patch_zones_by_zone_id_email_routing_dnsWRITE

Unlock Email Routing (zone / email / routing / dns) via PATCH /zones/{zone_id}/email/routing/dns

zone_settings:write
cloudflare_patch_zones_by_zone_id_firewall_access_rules_rules_by_rule_idWRITE

Update an IP Access rule via PATCH /zones/{zone_id}/firewall/access_rules/rules/{rule_id}

firewall_services:write
cloudflare_patch_zones_by_zone_id_firewall_rulesWRITE

Update priority of firewall rules (deprecated) via PATCH /zones/{zone_id}/firewall/rules

firewall_services:write
cloudflare_patch_zones_by_zone_id_firewall_rules_by_rule_idWRITE

Update priority of a firewall rule (deprecated) via PATCH /zones/{zone_id}/firewall/rules/{rule_id}

firewall_services:write
cloudflare_patch_zones_by_zone_id_firewall_waf_packages_by_package_idWRITE

Update a WAF package (deprecated) via PATCH /zones/{zone_id}/firewall/waf/packages/{package_id}

firewall_services:write
cloudflare_patch_zones_by_zone_id_firewall_waf_packages_by_package_id_groups_by_group_idWRITE

Update a WAF rule group (deprecated) via PATCH /zones/{zone_id}/firewall/waf/packages/{package_id}/groups/{group_id}

firewall_services:write
cloudflare_patch_zones_by_zone_id_firewall_waf_packages_by_package_id_rules_by_rule_idWRITE

Update a WAF rule (deprecated) via PATCH /zones/{zone_id}/firewall/waf/packages/{package_id}/rules/{rule_id}

firewall_services:write
cloudflare_patch_zones_by_zone_id_holdWRITE

Update Zone Hold via PATCH /zones/{zone_id}/hold

zone:write
cloudflare_patch_zones_by_zone_id_keyless_certificates_by_keyless_certificate_idWRITE

Edit Keyless SSL Configuration via PATCH /zones/{zone_id}/keyless_certificates/{keyless_certificate_id}

ssl_certificates:write
cloudflare_patch_zones_by_zone_id_managed_headersWRITE

Update Managed Transforms via PATCH /zones/{zone_id}/managed_headers

account_rulesets:write
cloudflare_patch_zones_by_zone_id_pagerules_by_pagerule_idWRITE

Edit a Page Rule via PATCH /zones/{zone_id}/pagerules/{pagerule_id}

page_rules:write
cloudflare_patch_zones_by_zone_id_pay_per_crawl_configurationWRITE

Changes pay-per-crawl config for a zone via PATCH /zones/{zone_id}/pay-per-crawl/configuration

zone_settings:write
cloudflare_patch_zones_by_zone_id_rulesets_by_ruleset_id_rules_by_rule_idWRITE

Update a zone ruleset rule via PATCH /zones/{zone_id}/rulesets/{ruleset_id}/rules/{rule_id}

account_rulesets:write
cloudflare_patch_zones_by_zone_id_settingsWRITE

Edit multiple zone settings (deprecated) via PATCH /zones/{zone_id}/settings

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_aegisWRITE

Change aegis setting via PATCH /zones/{zone_id}/settings/aegis

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_automatic_platform_optimizationWRITE

Change Automatic Platform Optimization setting via PATCH /zones/{zone_id}/settings/automatic_platform_optimization

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_binary_astWRITE

Change Binary AST setting via PATCH /zones/{zone_id}/settings/binary_ast

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_by_setting_idWRITE

Edit zone setting via PATCH /zones/{zone_id}/settings/{setting_id}

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_csam_scanner_third_partyWRITE

Update CSAM Scanner setting via PATCH /zones/{zone_id}/settings/csam_scanner_third_party

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_fontsWRITE

Change Cloudflare Fonts setting via PATCH /zones/{zone_id}/settings/fonts

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_h2_prioritizationWRITE

Change HTTP/2 Prioritization setting via PATCH /zones/{zone_id}/settings/h2_prioritization

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_image_resizingWRITE

Change Image Transformations setting via PATCH /zones/{zone_id}/settings/image_resizing

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_nelWRITE

Edit NEL setting via PATCH /zones/{zone_id}/settings/nel

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_origin_h2_max_streamsWRITE

Change Origin H2 Max Streams Setting via PATCH /zones/{zone_id}/settings/origin_h2_max_streams

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_origin_max_http_versionWRITE

Change Origin Max HTTP Version Setting via PATCH /zones/{zone_id}/settings/origin_max_http_version

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_rumWRITE

Toggle RUM on/off for a zone via PATCH /zones/{zone_id}/settings/rum

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_speed_brainWRITE

Change Cloudflare Speed Brain setting via PATCH /zones/{zone_id}/settings/speed_brain

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_ssl_automatic_modeWRITE

Patch Automatic SSL/TLS Enrollment status for given zone via PATCH /zones/{zone_id}/settings/ssl_automatic_mode

ssl_certificates:write
cloudflare_patch_zones_by_zone_id_settings_transformations_allowed_originsWRITE

Change Image Transformations Allowed Origins setting via PATCH /zones/{zone_id}/settings/transformations_allowed_origins

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_transformations_c2paWRITE

Change Image Transformations C2PA setting via PATCH /zones/{zone_id}/settings/transformations_c2pa

zone_settings:write
cloudflare_patch_zones_by_zone_id_settings_transformations_configWRITE

Change Transformations configuration via PATCH /zones/{zone_id}/settings/transformations_config

zone_settings:write
cloudflare_patch_zones_by_zone_id_smart_shieldWRITE

Patch Smart Shield Settings via PATCH /zones/{zone_id}/smart_shield

zone_settings:write
cloudflare_patch_zones_by_zone_id_ssl_certificate_packs_by_certificate_pack_idWRITE

Restart Validation or Update Advanced Certificate Manager Certificate Pack via PATCH /zones/{zone_id}/ssl/certificate_packs/{certificate_pack_id}

ssl_certificates:write
cloudflare_patch_zones_by_zone_id_ssl_universal_settingsWRITE

Edit Universal SSL Settings via PATCH /zones/{zone_id}/ssl/universal/settings

ssl_certificates:write
cloudflare_post_accounts_by_account_id_rulesetsWRITE

Create an account ruleset via POST /accounts/{account_id}/rulesets

account_rulesets:write
cloudflare_post_accounts_by_account_id_rulesets_by_ruleset_id_rulesWRITE

Create an account ruleset rule via POST /accounts/{account_id}/rulesets/{ruleset_id}/rules

account_rulesets:write
cloudflare_post_zones_by_zone_id_acm_custom_trust_storeWRITE

Upload Custom Origin Trust Store via POST /zones/{zone_id}/acm/custom_trust_store

ssl_certificates:write
cloudflare_post_zones_by_zone_id_acm_total_tlsWRITE

Enable or Disable Total TLS via POST /zones/{zone_id}/acm/total_tls

ssl_certificates:write
cloudflare_post_zones_by_zone_id_addressing_regional_hostnamesWRITE

Create Regional Hostname via POST /zones/{zone_id}/addressing/regional_hostnames

dns:write
cloudflare_post_zones_by_zone_id_ai_audit_robots_bulkWRITE

Bulk get robots.txt rules via POST /zones/{zone_id}/ai-audit/robots/bulk

zone_settings:write
cloudflare_post_zones_by_zone_id_cache_cache_reserve_clearWRITE

Start Cache Reserve Clear (zone / cache / cache reserve clear) via POST /zones/{zone_id}/cache/cache_reserve_clear

zone_settings:write
cloudflare_post_zones_by_zone_id_cache_tiered_cache_smart_topology_enableWRITE

Create Smart Tiered Cache setting via POST /zones/{zone_id}/cache/tiered_cache_smart_topology_enable

zone_settings:write
cloudflare_post_zones_by_zone_id_client_certificatesWRITE

Create Client Certificate via POST /zones/{zone_id}/client_certificates

ssl_certificates:write
cloudflare_post_zones_by_zone_id_custom_csrsWRITE

Create Custom CSR via POST /zones/{zone_id}/custom_csrs

ssl_certificates:write
cloudflare_post_zones_by_zone_id_custom_hostnamesWRITE

Create Custom Hostname via POST /zones/{zone_id}/custom_hostnames

ssl_certificates:write
cloudflare_post_zones_by_zone_id_dns_recordsWRITE

Create DNS Record via POST /zones/{zone_id}/dns_records

dns:write
cloudflare_post_zones_by_zone_id_dns_records_batchWRITE

Batch DNS Records via POST /zones/{zone_id}/dns_records/batch

dns:write
cloudflare_post_zones_by_zone_id_dns_records_scanWRITE

Scan DNS Records (deprecated) via POST /zones/{zone_id}/dns_records/scan

dns:write
cloudflare_post_zones_by_zone_id_dns_records_scan_reviewWRITE

Review Scanned DNS Records via POST /zones/{zone_id}/dns_records/scan/review

dns:write
cloudflare_post_zones_by_zone_id_dns_records_scan_triggerWRITE

Trigger DNS Record Scan via POST /zones/{zone_id}/dns_records/scan/trigger

dns:write
cloudflare_post_zones_by_zone_id_email_routing_disableWRITE

Disable Email Routing (zone / email / routing / disable) (deprecated) via POST /zones/{zone_id}/email/routing/disable

zone_settings:write
cloudflare_post_zones_by_zone_id_email_routing_dnsWRITE

Enable Email Routing (zone / email / routing / dns) via POST /zones/{zone_id}/email/routing/dns

zone_settings:write
cloudflare_post_zones_by_zone_id_email_routing_enableWRITE

Enable Email Routing (zone / email / routing / enable) (deprecated) via POST /zones/{zone_id}/email/routing/enable

zone_settings:write
cloudflare_post_zones_by_zone_id_email_routing_unlockWRITE

Unlock Email Routing (zone / email / routing / unlock) (deprecated) via POST /zones/{zone_id}/email/routing/unlock

zone_settings:write
cloudflare_post_zones_by_zone_id_environments_by_environment_id_purge_cacheWRITE

Purge Cached Content by Environment via POST /zones/{zone_id}/environments/{environment_id}/purge_cache

cache_purge
cloudflare_post_zones_by_zone_id_filtersWRITE

Create filters (deprecated) via POST /zones/{zone_id}/filters

firewall_services:write
cloudflare_post_zones_by_zone_id_firewall_access_rules_rulesWRITE

Create an IP Access rule via POST /zones/{zone_id}/firewall/access_rules/rules

firewall_services:write
cloudflare_post_zones_by_zone_id_firewall_lockdownsWRITE

Create a Zone Lockdown rule via POST /zones/{zone_id}/firewall/lockdowns

firewall_services:write
cloudflare_post_zones_by_zone_id_firewall_rulesWRITE

Create firewall rules (deprecated) via POST /zones/{zone_id}/firewall/rules

firewall_services:write
cloudflare_post_zones_by_zone_id_firewall_ua_rulesWRITE

Create a User Agent Blocking rule via POST /zones/{zone_id}/firewall/ua_rules

firewall_services:write
cloudflare_post_zones_by_zone_id_firewall_waf_overridesWRITE

Create a WAF override (deprecated) via POST /zones/{zone_id}/firewall/waf/overrides

zone_settings:write
cloudflare_post_zones_by_zone_id_holdWRITE

Create Zone Hold via POST /zones/{zone_id}/hold

zone:write
cloudflare_post_zones_by_zone_id_keyless_certificatesWRITE

Create Keyless SSL Configuration via POST /zones/{zone_id}/keyless_certificates

ssl_certificates:write
cloudflare_post_zones_by_zone_id_origin_tls_client_authWRITE

Upload Certificate via POST /zones/{zone_id}/origin_tls_client_auth

ssl_certificates:write
cloudflare_post_zones_by_zone_id_origin_tls_client_auth_hostnames_certificatesWRITE

Upload a Hostname Client Certificate via POST /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates

ssl_certificates:write
cloudflare_post_zones_by_zone_id_pagerulesWRITE

Create a Page Rule via POST /zones/{zone_id}/pagerules

page_rules:write
cloudflare_post_zones_by_zone_id_pay_per_crawl_configurationWRITE

Creates pay-per-crawl config for a zone via POST /zones/{zone_id}/pay-per-crawl/configuration

zone_settings:write
cloudflare_post_zones_by_zone_id_purge_cacheWRITE

Purge Cached Content via POST /zones/{zone_id}/purge_cache

cache_purge
cloudflare_post_zones_by_zone_id_rate_limitsWRITE

Create a rate limit (deprecated) via POST /zones/{zone_id}/rate_limits

firewall_services:write
cloudflare_post_zones_by_zone_id_rulesetsWRITE

Create a zone ruleset via POST /zones/{zone_id}/rulesets

account_rulesets:write
cloudflare_post_zones_by_zone_id_rulesets_by_ruleset_id_rulesWRITE

Create a zone ruleset rule via POST /zones/{zone_id}/rulesets/{ruleset_id}/rules

account_rulesets:write
cloudflare_post_zones_by_zone_id_secondary_dns_force_axfrWRITE

Force AXFR via POST /zones/{zone_id}/secondary_dns/force_axfr

dns:write
cloudflare_post_zones_by_zone_id_secondary_dns_incomingWRITE

Create Secondary Zone Configuration via POST /zones/{zone_id}/secondary_dns/incoming

dns:write
cloudflare_post_zones_by_zone_id_secondary_dns_outgoingWRITE

Create Primary Zone Configuration via POST /zones/{zone_id}/secondary_dns/outgoing

dns:write
cloudflare_post_zones_by_zone_id_secondary_dns_outgoing_disableWRITE

Disable Outgoing Zone Transfers via POST /zones/{zone_id}/secondary_dns/outgoing/disable

dns:write
cloudflare_post_zones_by_zone_id_secondary_dns_outgoing_enableWRITE

Enable Outgoing Zone Transfers via POST /zones/{zone_id}/secondary_dns/outgoing/enable

dns:write
cloudflare_post_zones_by_zone_id_secondary_dns_outgoing_force_notifyWRITE

Force DNS NOTIFY via POST /zones/{zone_id}/secondary_dns/outgoing/force_notify

dns:write
cloudflare_post_zones_by_zone_id_security_center_insights_scansWRITE

Start On-Demand Zone Scan via POST /zones/{zone_id}/security-center/insights/scans

zone_settings:write
cloudflare_post_zones_by_zone_id_smart_shield_cache_reserve_clearWRITE

Start Cache Reserve Clear (zone / smart shield / cache reserve clear) via POST /zones/{zone_id}/smart_shield/cache_reserve_clear

zone_settings:write
cloudflare_post_zones_by_zone_id_spectrum_appsWRITE

Create Spectrum application using a name for the origin via POST /zones/{zone_id}/spectrum/apps

zone_settings:write
cloudflare_post_zones_by_zone_id_speed_api_pages_by_url_testsWRITE

Start page test via POST /zones/{zone_id}/speed_api/pages/{url}/tests

zone_settings:write
cloudflare_post_zones_by_zone_id_speed_api_schedule_by_urlWRITE

Create scheduled page test via POST /zones/{zone_id}/speed_api/schedule/{url}

zone_settings:write
cloudflare_post_zones_by_zone_id_ssl_certificate_packs_orderWRITE

Order Advanced Certificate Manager Certificate Pack via POST /zones/{zone_id}/ssl/certificate_packs/order

ssl_certificates:write
cloudflare_put_accounts_by_account_id_rulesets_by_ruleset_idWRITE

Update an account ruleset via PUT /accounts/{account_id}/rulesets/{ruleset_id}

account_rulesets:write
cloudflare_put_accounts_by_account_id_rulesets_phases_by_ruleset_phase_entrypointWRITE

Update an account entry point ruleset via PUT /accounts/{account_id}/rulesets/phases/{ruleset_phase}/entrypoint

account_rulesets:write
cloudflare_put_zones_by_zone_id_activation_checkWRITE

Rerun the Activation Check via PUT /zones/{zone_id}/activation_check

zone:write
cloudflare_put_zones_by_zone_id_cache_origin_post_quantum_encryptionWRITE

Change Origin Post-Quantum Encryption setting (deprecated) via PUT /zones/{zone_id}/cache/origin_post_quantum_encryption

zone_settings:write
cloudflare_put_zones_by_zone_id_certificate_authorities_hostname_associationsWRITE

Replace Hostname Associations via PUT /zones/{zone_id}/certificate_authorities/hostname_associations

ssl_certificates:write
cloudflare_put_zones_by_zone_id_custom_hostnames_by_custom_hostname_id_certificate_pack_by_certificate_pack_id_certificates_by_certificate_idWRITE

Replace Custom Certificate and Custom Key In Custom Hostname via PUT /zones/{zone_id}/custom_hostnames/{custom_hostname_id}/certificate_pack/{certificate_pack_id}/certificates/{certificate_id}

ssl_certificates:write
cloudflare_put_zones_by_zone_id_custom_hostnames_fallback_originWRITE

Update Fallback Origin for Custom Hostnames via PUT /zones/{zone_id}/custom_hostnames/fallback_origin

ssl_certificates:write
cloudflare_put_zones_by_zone_id_custom_nsWRITE

Set Account Custom Nameserver Related Zone Metadata (deprecated) via PUT /zones/{zone_id}/custom_ns

zone:write
cloudflare_put_zones_by_zone_id_dns_records_by_dns_record_idWRITE

Overwrite DNS Record via PUT /zones/{zone_id}/dns_records/{dns_record_id}

dns:write
cloudflare_put_zones_by_zone_id_email_routingWRITE

Update Email Routing settings (zone / email / routing) [PUT] via PUT /zones/{zone_id}/email/routing

zone_settings:write
cloudflare_put_zones_by_zone_id_filtersWRITE

Update filters (deprecated) via PUT /zones/{zone_id}/filters

firewall_services:write
cloudflare_put_zones_by_zone_id_filters_by_filter_idWRITE

Update a filter (deprecated) via PUT /zones/{zone_id}/filters/{filter_id}

firewall_services:write
cloudflare_put_zones_by_zone_id_firewall_lockdowns_by_lock_downs_idWRITE

Update a Zone Lockdown rule via PUT /zones/{zone_id}/firewall/lockdowns/{lock_downs_id}

firewall_services:write
cloudflare_put_zones_by_zone_id_firewall_rulesWRITE

Update firewall rules (deprecated) via PUT /zones/{zone_id}/firewall/rules

firewall_services:write
cloudflare_put_zones_by_zone_id_firewall_rules_by_rule_idWRITE

Update a firewall rule (deprecated) via PUT /zones/{zone_id}/firewall/rules/{rule_id}

firewall_services:write
cloudflare_put_zones_by_zone_id_firewall_ua_rules_by_ua_rule_idWRITE

Update a User Agent Blocking rule via PUT /zones/{zone_id}/firewall/ua_rules/{ua_rule_id}

firewall_services:write
cloudflare_put_zones_by_zone_id_firewall_waf_overrides_by_overrides_idWRITE

Update WAF override (deprecated) via PUT /zones/{zone_id}/firewall/waf/overrides/{overrides_id}

zone_settings:write
cloudflare_put_zones_by_zone_id_hostnames_settings_by_setting_id_by_hostnameWRITE

Edit TLS setting for hostname via PUT /zones/{zone_id}/hostnames/settings/{setting_id}/{hostname}

ssl_certificates:write
cloudflare_put_zones_by_zone_id_origin_tls_client_auth_hostnamesWRITE

Enable or Disable a Hostname for Client Authentication via PUT /zones/{zone_id}/origin_tls_client_auth/hostnames

ssl_certificates:write
cloudflare_put_zones_by_zone_id_origin_tls_client_auth_settingsWRITE

Set Enablement for Zone via PUT /zones/{zone_id}/origin_tls_client_auth/settings

ssl_certificates:write
cloudflare_put_zones_by_zone_id_pagerules_by_pagerule_idWRITE

Update a Page Rule via PUT /zones/{zone_id}/pagerules/{pagerule_id}

page_rules:write
cloudflare_put_zones_by_zone_id_rate_limits_by_rate_limit_idWRITE

Update a rate limit (deprecated) via PUT /zones/{zone_id}/rate_limits/{rate_limit_id}

firewall_services:write
cloudflare_put_zones_by_zone_id_rulesets_by_ruleset_idWRITE

Update a zone ruleset via PUT /zones/{zone_id}/rulesets/{ruleset_id}

account_rulesets:write
cloudflare_put_zones_by_zone_id_rulesets_phases_by_ruleset_phase_entrypointWRITE

Update a zone entry point ruleset via PUT /zones/{zone_id}/rulesets/phases/{ruleset_phase}/entrypoint

account_rulesets:write
cloudflare_put_zones_by_zone_id_secondary_dns_incomingWRITE

Update Secondary Zone Configuration via PUT /zones/{zone_id}/secondary_dns/incoming

dns:write
cloudflare_put_zones_by_zone_id_secondary_dns_outgoingWRITE

Update Primary Zone Configuration via PUT /zones/{zone_id}/secondary_dns/outgoing

dns:write
cloudflare_put_zones_by_zone_id_security_center_insights_by_issue_id_dismissWRITE

Archives Zone Security Center Insight via PUT /zones/{zone_id}/security-center/insights/{issue_id}/dismiss

zone_settings:write
cloudflare_put_zones_by_zone_id_security_center_securitytxtWRITE

Updates security.txt via PUT /zones/{zone_id}/security-center/securitytxt

zone_settings:write
cloudflare_put_zones_by_zone_id_spectrum_apps_by_app_idWRITE

Update Spectrum application configuration using a name for the origin via PUT /zones/{zone_id}/spectrum/apps/{app_id}

zone_settings:write
cloudflare_put_zones_by_zone_id_url_normalizationWRITE

Update URL Normalization settings via PUT /zones/{zone_id}/url_normalization

account_rulesets:write

Put Cloudflare behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.